Hello-VT-rp

Hello-VT-rp A simple hypervisor demonstrating the use of the Intel VT-rp redirect protection technology. This repository is a complement of the Intel VT-rp blog post series and not meant for a general use. For the overview of Intel VT-rp, please read the post. The hypervisor The hypervisor/...

PT-2026-122209

A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecos pw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is...

Malicious code in @zalastax/nolb-react-pw (npm)

The package @zalastax/nolb-react-pw was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-pw (npm)

The package @zalastax/nolb-pw was found to contain malicious code. --- Credit: OpenSSF source...

OESA-2026-3116 pipewire security update

is a server and user space API to deal with multimedia pipelines,contains command line utilities. Security Fixes: RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return.CVE-2026-14324...

DEBIAN-CVE-2026-14324

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return...

UBUNTU-CVE-2026-14324

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return...

CVE-2026-14324

CVE-2026-14324 — Pipewire RAOP module vulnerability. The RAOP module accepts unbounded Content-Length values and does not validate the return of pw_array_add(), which can lead to a null dereference. This is a technical detail documented in the CVE record and CVE-list entry. The CVSSv3.1 metrics i...

CVE-2026-14324

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return...

CVE-2026-14324

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return. Mitigation If AirPlay streaming is not required, unload or disable the module-raop-discover and module-raop-sink PipeWire modules...

CVE-2026-11793

A stack buffer overflow flaw was found in 389 Directory Server. The checkPrefix function in pw.c copies an attacker-controlled algorithm ID into a 256-byte stack buffer without bounds checking when parsing reversible-encrypted attribute values. An attacker with Directory Manager privileges can...

CLSA-2026-1779436377 cups: Fix of CVE-2026-27447

CVE-2026-27447: fix authorization bypass in cupsd by replacing case-insensitive username comparisons with byte-exact strcmp against pw-pwname; also include upstream follow-up commit 849fba7d "Fix unauthenticated print policies", Issue 1557 to restore behavior for CUPSDAUTHNONE policies with named...

EUVD-2026-14415

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores administrative authentication material in the ecospw cookie using a reversible Base64-encoded format with a static suffix. An attacker who obtains or derives this cookie value can forge a valid administrative session and gain...

EUVD-2025-13844

Malicious code in bioql PyPI...

Malicious code in @zalastax/nolb-pw (npm)

The package @zalastax/nolb-pw was found to contain malicious code...

MAL-2025-13402 Malicious code in @zalastax/nolb-pw (npm)

The package @zalastax/nolb-pw was found to contain malicious code...

Malicious code in @zalastax/nolb-react-pw (npm)

The package @zalastax/nolb-react-pw was found to contain malicious code...

MAL-2025-13728 Malicious code in @zalastax/nolb-react-pw (npm)

The package @zalastax/nolb-react-pw was found to contain malicious code...

CVE-2025-49888

Missing Authorization vulnerability in pimwick PW WooCommerce On Sale! pw-woocommerce-on-sale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PW WooCommerce On Sale!: from n/a through = 1.39...

CVE-2025-49888

Missing Authorization vulnerability in pimwick PW WooCommerce On Sale! pw-woocommerce-on-sale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PW WooCommerce On Sale!: from n/a through = 1.39...